[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-47589":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":62,"related":63,"reserved_at":9,"published_at":77,"modified_at":78,"state":79,"summary":80,"references_raw":89,"kevs":124,"epss":125,"epss_history":128,"metrics":374,"affected":380},"CVE-2021-47589","In the Linux kernel, the following vulnerability has been resolved:\n\nigbvf: fix double free in `igbvf_probe`\n\nIn `igbvf_probe`, if register_netdev() fails, the program will go to\nlabel err_hw_init, and then to label err_ioremap. In free_netdev() which\nis just below label err_ioremap, there is `list_for_each_entry_safe` and\n`netif_napi_del` which aims to delete all entries in `dev->napi_list`.\nThe program has added an entry `adapter->rx_ring->napi` which is added by\n`netif_napi_add` in igbvf_alloc_queues(). However, adapter->rx_ring has\nbeen freed below label err_hw_init. So this a UAF.\n\nIn terms of how to patch the problem, we can refer to igbvf_remove() and\ndelete the entry before `adapter->rx_ring`.\n\nThe KASAN logs are as follows:\n\n[   35.126075] BUG: KASAN: use-after-free in free_netdev+0x1fd/0x450\n[   35.127170] Read of size 8 at addr ffff88810126d990 by task modprobe/366\n[   35.128360]\n[   35.128643] CPU: 1 PID: 366 Comm: modprobe Not tainted 5.15.0-rc2+ #14\n[   35.129789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014\n[   35.131749] Call Trace:\n[   35.132199]  dump_stack_lvl+0x59/0x7b\n[   35.132865]  print_address_description+0x7c/0x3b0\n[   35.133707]  ? free_netdev+0x1fd/0x450\n[   35.134378]  __kasan_report+0x160/0x1c0\n[   35.135063]  ? free_netdev+0x1fd/0x450\n[   35.135738]  kasan_report+0x4b/0x70\n[   35.136367]  free_netdev+0x1fd/0x450\n[   35.137006]  igbvf_probe+0x121d/0x1a10 [igbvf]\n[   35.137808]  ? igbvf_vlan_rx_add_vid+0x100/0x100 [igbvf]\n[   35.138751]  local_pci_probe+0x13c/0x1f0\n[   35.139461]  pci_device_probe+0x37e/0x6c0\n[   35.165526]\n[   35.165806] Allocated by task 366:\n[   35.166414]  ____kasan_kmalloc+0xc4/0xf0\n[   35.167117]  foo_kmem_cache_alloc_trace+0x3c/0x50 [igbvf]\n[   35.168078]  igbvf_probe+0x9c5/0x1a10 [igbvf]\n[   35.168866]  local_pci_probe+0x13c/0x1f0\n[   35.169565]  pci_device_probe+0x37e/0x6c0\n[   35.179713]\n[   35.179993] Freed by task 366:\n[   35.180539]  kasan_set_track+0x4c/0x80\n[   35.181211]  kasan_set_free_info+0x1f/0x40\n[   35.181942]  ____kasan_slab_free+0x103/0x140\n[   35.182703]  kfree+0xe3/0x250\n[   35.183239]  igbvf_probe+0x1173/0x1a10 [igbvf]\n[   35.184040]  local_pci_probe+0x13c/0x1f0",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60],{"_key":25},"SUSE-SU-2024:2360-1",{"_key":27},"SUSE-SU-2024:2362-1",{"_key":29},"SUSE-SU-2024:2381-1",{"_key":31},"SUSE-SU-2024:2384-1",{"_key":33},"SUSE-SU-2024:2561-1",{"_key":35},"SUSE-SU-2024:2902-1",{"_key":37},"SUSE-SU-2024:2929-1",{"_key":39},"SUSE-SU-2024:4038-1",{"_key":41},"SUSE-SU-2024:4103-1",{"_key":43},"SUSE-SU-2024:4140-1",{"_key":45},"SUSE-SU-2024:2372-1",{"_key":47},"SUSE-SU-2024:2394-1",{"_key":49},"SUSE-SU-2024:2939-1",{"_key":51},"DEBIAN-CVE-2021-47589",{"_key":53},"UBUNTU-CVE-2021-47589",{"_key":55},"USN-7797-1",{"_key":57},"USN-7797-2",{"_key":59},"USN-7797-3",{"_key":61},"USN-7865-1",[],[64,65,66,67,68,69,70,71,72,73,74,75,76],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},"2024-06-19T14:53:53.565Z","2026-05-11T13:57:27.931Z","Modified",{"cisa_kev":81,"cisa_ransomware":81,"cisa_vendor":9,"epss_severity":82,"epss_score":83,"severity":84,"severity_score":85,"severity_version":86,"severity_source":87,"severity_vector":88,"severity_status":79},false,"low",0.00014,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[90,96,100,104,108,112,116,120],{"url":91,"sources":92,"tags":94},"https://git.kernel.org/stable/c/ffe1695b678729edec04037e691007900a2b2beb",[93,87],"cve.org",[95],"Patch",{"url":97,"sources":98,"tags":99},"https://git.kernel.org/stable/c/79d9b092035dcdbe636b70433149df9cc6db1e49",[93,87],[95],{"url":101,"sources":102,"tags":103},"https://git.kernel.org/stable/c/8d0c927a9fb2b4065230936b77b54f857a3754fc",[93,87],[95],{"url":105,"sources":106,"tags":107},"https://git.kernel.org/stable/c/cc9b655bb84f1be283293dfea94dff9a31b106ac",[93,87],[95],{"url":109,"sources":110,"tags":111},"https://git.kernel.org/stable/c/8addba6cab94ce01686ea2e80ed1530f9dc33a9a",[93,87],[95],{"url":113,"sources":114,"tags":115},"https://git.kernel.org/stable/c/74a16e062b23332d8db017ff4a41e16279c44411",[93,87],[95],{"url":117,"sources":118,"tags":119},"https://git.kernel.org/stable/c/944b8be08131f5faf2cd2440aa1c24a39a163a54",[93,87],[95],{"url":121,"sources":122,"tags":123},"https://git.kernel.org/stable/c/b6d335a60dc624c0d279333b22c737faa765b028",[93,87],[95],[],{"date":126,"score":83,"percentile":127},"2026-06-03",0.02715,[129,132,135,138,141,144,146,149,152,155,158,161,164,167,170,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,230,233,235,238,241,244,247,250,252,254,257,260,262,264,267,269,271,274,277,280,283,285,288,291,294,297,299,302,304,307,309,311,314,317,320,323,326,329,332,335,338,340,342,344,346,348,350,352,354,357,359,361,363,366,368,371],{"date":130,"score":83,"percentile":131},"2025-11-04",0.01835,{"date":133,"score":83,"percentile":134},"2025-11-05",0.0186,{"date":136,"score":83,"percentile":137},"2025-11-06",0.0188,{"date":139,"score":83,"percentile":140},"2025-11-07",0.01887,{"date":142,"score":83,"percentile":143},"2025-11-08",0.0189,{"date":145,"score":83,"percentile":143},"2025-11-09",{"date":147,"score":83,"percentile":148},"2025-11-10",0.01875,{"date":150,"score":83,"percentile":151},"2025-11-11",0.01886,{"date":153,"score":83,"percentile":154},"2025-11-12",0.01768,{"date":156,"score":83,"percentile":157},"2025-11-13",0.01782,{"date":159,"score":83,"percentile":160},"2025-11-14",0.01785,{"date":162,"score":83,"percentile":163},"2025-11-15",0.01805,{"date":165,"score":83,"percentile":166},"2025-11-16",0.01809,{"date":168,"score":83,"percentile":169},"2025-11-17",0.01798,{"date":171,"score":172,"percentile":173},"2025-11-18",0.00092,0.22324,{"date":175,"score":172,"percentile":176},"2025-11-19",0.22334,{"date":178,"score":172,"percentile":179},"2025-11-20",0.22341,{"date":181,"score":83,"percentile":182},"2025-11-21",0.01988,{"date":184,"score":83,"percentile":185},"2025-11-22",0.01987,{"date":187,"score":83,"percentile":188},"2025-11-23",0.01984,{"date":190,"score":83,"percentile":191},"2025-11-24",0.01971,{"date":193,"score":83,"percentile":194},"2025-11-25",0.01965,{"date":196,"score":83,"percentile":197},"2025-11-26",0.01928,{"date":199,"score":83,"percentile":200},"2025-11-27",0.01927,{"date":202,"score":83,"percentile":203},"2025-11-28",0.01925,{"date":205,"score":83,"percentile":206},"2025-11-29",0.01972,{"date":208,"score":83,"percentile":209},"2025-11-30",0.0198,{"date":211,"score":83,"percentile":212},"2025-12-01",0.02015,{"date":214,"score":83,"percentile":215},"2025-12-02",0.01884,{"date":217,"score":83,"percentile":218},"2025-12-03",0.01891,{"date":220,"score":83,"percentile":221},"2025-12-04",0.01856,{"date":223,"score":83,"percentile":224},"2025-12-05",0.01872,{"date":226,"score":83,"percentile":227},"2025-12-06",0.01876,{"date":229,"score":83,"percentile":224},"2025-12-07",{"date":231,"score":83,"percentile":232},"2025-12-08",0.01873,{"date":234,"score":83,"percentile":143},"2025-12-09",{"date":236,"score":83,"percentile":237},"2025-12-10",0.01917,{"date":239,"score":83,"percentile":240},"2025-12-11",0.01909,{"date":242,"score":83,"percentile":243},"2025-12-12",0.01915,{"date":245,"score":83,"percentile":246},"2025-12-13",0.01898,{"date":248,"score":83,"percentile":249},"2025-12-14",0.019,{"date":251,"score":83,"percentile":218},"2025-12-15",{"date":253,"score":83,"percentile":151},"2025-12-16",{"date":255,"score":83,"percentile":256},"2025-12-17",0.01902,{"date":258,"score":83,"percentile":259},"2025-12-18",0.01899,{"date":261,"score":83,"percentile":249},"2025-12-19",{"date":263,"score":83,"percentile":249},"2025-12-20",{"date":265,"score":83,"percentile":266},"2025-12-21",0.01911,{"date":268,"score":83,"percentile":266},"2025-12-22",{"date":270,"score":83,"percentile":266},"2025-12-23",{"date":272,"score":83,"percentile":273},"2025-12-24",0.01918,{"date":275,"score":83,"percentile":276},"2025-12-25",0.01924,{"date":278,"score":83,"percentile":279},"2025-12-26",0.01926,{"date":281,"score":83,"percentile":282},"2025-12-27",0.01904,{"date":284,"score":83,"percentile":203},"2025-12-28",{"date":286,"score":83,"percentile":287},"2025-12-29",0.01916,{"date":289,"score":83,"percentile":290},"2025-12-30",0.0191,{"date":292,"score":83,"percentile":293},"2025-12-31",0.01906,{"date":295,"score":83,"percentile":296},"2026-01-01",0.01932,{"date":298,"score":83,"percentile":276},"2026-01-02",{"date":300,"score":83,"percentile":301},"2026-01-03",0.01929,{"date":303,"score":83,"percentile":218},"2026-01-04",{"date":305,"score":83,"percentile":306},"2026-01-05",0.01893,{"date":308,"score":83,"percentile":218},"2026-01-06",{"date":310,"score":83,"percentile":293},"2026-01-07",{"date":312,"score":83,"percentile":313},"2026-01-08",0.01923,{"date":315,"score":83,"percentile":316},"2026-01-09",0.01941,{"date":318,"score":83,"percentile":319},"2026-01-10",0.01954,{"date":321,"score":83,"percentile":322},"2026-01-11",0.01943,{"date":324,"score":83,"percentile":325},"2026-01-12",0.01945,{"date":327,"score":83,"percentile":328},"2026-01-13",0.01936,{"date":330,"score":83,"percentile":331},"2026-01-14",0.01944,{"date":333,"score":83,"percentile":334},"2026-01-15",0.01937,{"date":336,"score":83,"percentile":337},"2026-01-16",0.01939,{"date":339,"score":83,"percentile":316},"2026-01-17",{"date":341,"score":83,"percentile":319},"2026-01-18",{"date":343,"score":83,"percentile":331},"2026-01-19",{"date":345,"score":83,"percentile":301},"2026-01-20",{"date":347,"score":83,"percentile":203},"2026-01-21",{"date":349,"score":83,"percentile":273},"2026-01-22",{"date":351,"score":83,"percentile":200},"2026-01-23",{"date":353,"score":83,"percentile":334},"2026-01-24",{"date":355,"score":83,"percentile":356},"2026-01-25",0.01931,{"date":358,"score":83,"percentile":301},"2026-01-26",{"date":360,"score":83,"percentile":279},"2026-01-27",{"date":362,"score":83,"percentile":197},"2026-01-28",{"date":364,"score":83,"percentile":365},"2026-01-29",0.01946,{"date":367,"score":83,"percentile":365},"2026-01-30",{"date":369,"score":83,"percentile":370},"2026-01-31",0.01967,{"date":372,"score":83,"percentile":373},"2026-02-01",0.01997,[375],{"source":87,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":376,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":377,"vectorString":88,"impactScore":378,"exploitabilityScore":379},"HIGH",9.8,4.6,[381,416],{"ecosystem":9,"name":382,"vendor":383,"product":383,"cpe_part":384,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":385},"Linux","linux","a",[386,393,396,399,402,405,408,411,414],{"version":387,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":391,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C ffe1695b678729edec04037e691007900a2b2beb",true,"d4e0fe01a38a073568aee541a0247fe734095979","including","ffe1695b678729edec04037e691007900a2b2beb","excluding",{"version":394,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":395,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C 79d9b092035dcdbe636b70433149df9cc6db1e49","79d9b092035dcdbe636b70433149df9cc6db1e49",{"version":397,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":398,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C 8d0c927a9fb2b4065230936b77b54f857a3754fc","8d0c927a9fb2b4065230936b77b54f857a3754fc",{"version":400,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":401,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C cc9b655bb84f1be283293dfea94dff9a31b106ac","cc9b655bb84f1be283293dfea94dff9a31b106ac",{"version":403,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":404,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C 8addba6cab94ce01686ea2e80ed1530f9dc33a9a","8addba6cab94ce01686ea2e80ed1530f9dc33a9a",{"version":406,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":407,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C 74a16e062b23332d8db017ff4a41e16279c44411","74a16e062b23332d8db017ff4a41e16279c44411",{"version":409,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":410,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C 944b8be08131f5faf2cd2440aa1c24a39a163a54","944b8be08131f5faf2cd2440aa1c24a39a163a54",{"version":412,"is_range":388,"range_type":93,"version_start":389,"version_start_type":390,"version_end":413,"version_end_type":392,"fixed_in":9},">= d4e0fe01a38a073568aee541a0247fe734095979, \u003C b6d335a60dc624c0d279333b22c737faa765b028","b6d335a60dc624c0d279333b22c737faa765b028",{"version":415,"is_range":81,"range_type":93,"version_start":415,"version_start_type":390,"version_end":415,"version_end_type":390,"fixed_in":9},"2.6.30",{"ecosystem":9,"name":417,"vendor":383,"product":418,"cpe_part":419,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":420},"linux kernel","linux_kernel","o",[421,425,429,433,437,441,445],{"version":422,"is_range":388,"range_type":423,"version_start":415,"version_start_type":390,"version_end":424,"version_end_type":392,"fixed_in":9},"gte2.6.30_lt4.4.296","cpe","4.4.296",{"version":426,"is_range":388,"range_type":423,"version_start":427,"version_start_type":390,"version_end":428,"version_end_type":392,"fixed_in":9},"gte4.5_lt4.9.294","4.5","4.9.294",{"version":430,"is_range":388,"range_type":423,"version_start":431,"version_start_type":390,"version_end":432,"version_end_type":392,"fixed_in":9},"gte4.10_lt4.14.259","4.10","4.14.259",{"version":434,"is_range":388,"range_type":423,"version_start":435,"version_start_type":390,"version_end":436,"version_end_type":392,"fixed_in":9},"gte4.15_lt4.19.222","4.15","4.19.222",{"version":438,"is_range":388,"range_type":423,"version_start":439,"version_start_type":390,"version_end":440,"version_end_type":392,"fixed_in":9},"gte4.20_lt5.4.168","4.20","5.4.168",{"version":442,"is_range":388,"range_type":423,"version_start":443,"version_start_type":390,"version_end":444,"version_end_type":392,"fixed_in":9},"gte5.5_lt5.10.88","5.5","5.10.88",{"version":446,"is_range":388,"range_type":423,"version_start":447,"version_start_type":390,"version_end":448,"version_end_type":392,"fixed_in":9},"gte5.11_lt5.15.11","5.11","5.15.11"]